Ami Aptio V
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Ami Aptio V.
By the Year
In 2026 there have been 0 vulnerabilities in Ami Aptio V. Last year, in 2025 Aptio V had 6 security vulnerabilities published. Right now, Aptio V is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 6 | 5.80 |
| 2024 | 1 | 0.00 |
| 2023 | 7 | 7.30 |
| 2022 | 4 | 8.35 |
It may take a day or so for new Aptio V vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Ami Aptio V Security Vulnerabilities
APTIOV BIOS: Local Permission Escalation via BIOS Vulnerability
CVE-2025-58770
- December 12, 2025
APTIOV contains a vulnerability in BIOS where a user may cause Improper Handling of Insufficient Permissions or Privileges by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.
Improper Handling of Insufficient Permissions or Privileges
APTIOV BIOS OOB Buffer Overflow (CVE-2025-33044)
CVE-2025-33044
- October 14, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability.
Buffer Overflow
APTIOV BIOS GCC Size-Check Bypass (CVE-2025-22833)
CVE-2025-22833
- October 14, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.
Memory Corruption
APTIO V BIOS OoB Write Vulnerability Enables Local Data Corruption
CVE-2025-22832
- October 14, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.
Memory Corruption
APTIO V BIOS OOB Write (CVE-2025-22831)
CVE-2025-22831
- October 14, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.
Memory Corruption
Improper Input Validation in APTIONV BIOS (CVE-2025-33043)
CVE-2025-33043
5.8 - Medium
- May 29, 2025
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity.
Improper Input Validation
Local Access Control Bypass in APTIO V BIOS leads to SPI Flash tampering
CVE-2024-2315
- November 12, 2024
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.
AMI AptioV BIOS Local PNG Logo Upload Vulnerability
CVE-2023-39539
7.5 - High
- December 06, 2023
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
Improper Input Validation
AMI AptioV BIOS Local BMP Logo Upload Vulnerability (CVE-2023-39538)
CVE-2023-39538
7.8 - High
- December 06, 2023
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
Unrestricted File Upload
AMI AptioV BIOS Improper Input Validation over LAN
CVE-2023-39535
7.8 - High
- November 14, 2023
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
AMI AptioV BIOS Local Network Input Validation Vulnerability
CVE-2023-39536
7.8 - High
- November 14, 2023
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
AMI AptioV BIOS Input Validation Flaw Enables Local Exploit
CVE-2023-39537
7.8 - High
- November 14, 2023
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
AMI AptioV BIOS Improper Network Access Control
CVE-2023-34469
4.6 - Medium
- September 12, 2023
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality.
AMI AptioV BIOS Local Network Improper Access Control
CVE-2023-34470
7.8 - High
- September 12, 2023
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
SMM PrivEsc via SmmSmbiosElog in AMI Aptio 5.x
CVE-2022-40250
8.8 - High
- September 20, 2022
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: SmmSmbiosElog SHA256: 3a8acb4f9bddccb19ec3b22b22ad97963711550f76b27b606461cd5073a93b59 Module GUID: 8e61fd6b-7a8b-404f-b83f-aa90a47cabdf This issue affects: AMI Aptio 5.x. This issue affects: AMI Aptio 5.x.
Memory Corruption
Privilege Elevation in OverClockSmiHandler via SMM Arbitrary Code Execution
CVE-2022-40261
8.2 - High
- September 20, 2022
An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: OverClockSmiHandler SHA256: a204699576e1a48ce915d9d9423380c8e4c197003baf9d17e6504f0265f3039c Module GUID: 4698C2BD-A903-410E-AD1F-5EEF3A1AE422
Classic Buffer Overflow
Arbitrary Code Exec in UEFI PEI via S3Resume2Pei Module
CVE-2022-40262
8.2 - High
- September 20, 2022
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71
Memory Corruption
UEFI PEI Stage Arbitrary Code Exec in AMI Aptio5.x
CVE-2022-26873
8.2 - High
- September 20, 2022
A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: PlatformInitAdvancedPreMem SHA256: 644044fdb8daea30a7820e0f5f88dbf5cd460af72fbf70418e9d2e47efed8d9b Module GUID: EEEE611D-F78F-4FB9-B868-55907F169280 This issue affects: AMI Aptio 5.x.
Memory Corruption
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Ami Aptio V or by Ami? Click the Watch button to subscribe.
